top of page
HOME
Anchor 1

Seven Layer Model for Digital Public Infrastructure

A mandate-driven architecture with phased rollout, and enforceable outcomes.

The Seven Layers

Available from 17 September 2025

James Stewart, Public Digital

For DPI to fulfill its purpose it must be reliable over time, legible to all its users and stakeholders, and well governed. That means that even as we adopt iterative methods to design our services and infrastructure we mustn't lose sight of the vital role of legislative mandates and institutional clarity. Ott's framework helps us do just that, reminding us that even the design of seemingly simple modules can be a political act and offering a clear framework to work through the consequences

What is Digital Public Infrastructure?

Digital Public Infrastructure is a legal institution delivered through governed technology. The Seven Layer Model for Digital Public Infrastructure is a governance-first framework that sequences law, mandate, canonical records, orchestration, execution, interfaces, and oversight to make digital services legally enforceable. It is not the OSI networking model. The outcome is enforceable decisions, traceable accountability, and sustainable interoperability across sectors.

Valid public functions begin in law and remain under institutional custodianship. Systems do not gain legitimacy from performance or configuration; they acquire it through statutory origin, named responsibility, and contestability. Without this legal sequence, a platform can simulate service while failing to constitute governance.

Why this sequence matters

The Seven Layers

Establish the constitutional and statutory basis for digital functions and recognise digital legal effects.

Assign lawful custodianship and responsibility for service delivery and supervision.

Govern registries as evidence with provenance, stewardship, and correction procedures.

Operate certified environments that execute legally defined rules with traceability to institutional instructions.

Finalise public acts and issue binding decisions and certifications with legal effect.

Provide procedural access, receipts, timelines, and inclusive channels that operationalise rights.

Ensure enforceability, redress, and independent supervision over digital acts.

The Seven Layers Model

How does the Seven Layer Model make services legally enforceable?

 

By sequencing legal authority, institutional mandate, canonical records, governed rule execution, binding issuance, user rights at interfaces, and independent oversight.

Is this the OSI

networking model?

 

No. This framework governs lawful service delivery and due process; OSI standardises network communication and has no legal effect.

​

l7-oversight-remed

WHY IT IS NEEDED

Digital Public Infrastructure is often built as technology first, with governance and law considered later or not at all. This approach creates risks that weaken trust in institutions and limit the impact of digital public services. The Seven Layer Model was developed to address these gaps and to provide governments, donors, and implementers with a lawful and resilient foundation for digital transformation.

Why It Is Needed

Weak Institutional Mandates

If no public institution is clearly responsible for oversight and delivery, accountability breaks down and trust is eroded.

Records Without Recognition

Registries and data often lack evidentiary safeguards, leading to disputes over ownership, rights, and authenticity.

Unenforceable Outcomes

Services may issue outputs or approvals that lack legal standing, undermining citizen confidence in digital systems.

Lack of Oversight and Remedy

Without channels for appeals, audits, or scrutiny, mistakes and abuses remain uncorrected, weakening institutional legitimacy.

Unclear Legal Authority

When infrastructure is launched without legislation or regulation, its outputs can be challenged as unenforceable, leaving digital public services fragile.

Opaque Service Logic

Rules coded directly into platforms without legal grounding make decisions unappealable and difficult to scrutinise.

Interfaces Without Rights

Portals and apps often provide access but fail to embed procedural rights or obligations, leaving users without recourse.

Access The Seven Layer
Model Paper

Complete the form to receive the official Seven Layer Model v0.8 paper by email on 16 September 2025.

Thank you. The download link has been sent to your email.

Stakeholder value

Digital Public Infrastructure succeeds when roles and duties are clear. This table maps the needs of governments, donors, vendors, architects, and civil society to what the Seven Layer Model guarantees, so law first sequencing produces enforceable and reviewable services.

  • Reassert national sovereignty by ensuring digital systems operate under statute, not vendor defaults.

  • Protect legitimacy of registries, ID, and consent systems through statutory authority.

  • Prevent governance displacement by sequencing law before technical deployment.

  • Align digital reforms with constitutional continuity rather than donor timelines.

MEET WITH AUTHOR

Senior advisor in Digital Identity and Digital Public Infrastructure. Ott helps institutions align mandates, canonical registers, machine-readable rules, and verifiable execution to deliver enforceable outcomes. Engagements combine policy, architecture, and delivery support.

"My mission in creating the Seven Layer Model is to give countries a practical and lawful path to digital transformation that strengthens trust in institutions."​

Ott Sarv The Seven Layer Model Author

Ott Sarv

Author of The Seven Layer Model

  • LinkedIn
Author

INSIGHTS & STATISTICS

7

LAYERS OF LAW AND GOVERNANCE

23

INTEROPERABILITY USE CASES STUDIED

45

DATA

SYSTEMS BENCHMARKED

18

ADVISORY SESSIONS DELIVERED GLOBALLY

bottom of page